Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
File: 2shrTkbnV9HOeo2AfDvNLf2AEHo.mft (raw, json)
Hash identifier: 3iKfBAswfToLUXXw3CKuqOSTqwxD1vEjmXS0ciK/rPY=
Subject key identifier: AC:59:41:48:2B:DB:95:9A:8C:62:E0:2D:F8:BC:CA:57:0D:95:75:DA
Authority key identifier: DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
Certificate issuer: /CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Certificate serial: 01A18C417C0E7AB062D25BBA6F1F92711473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
Manifest number: EE
Signing time: Fri 30 Oct 2026 10:01:04 +0000
Manifest this update: Fri 30 Oct 2026 10:01:04 +0000
Manifest next update: Sat 31 Oct 2026 10:01:04 +0000
Files and hashes: 1: 2shrTkbnV9HOeo2AfDvNLf2AEHo.crl (hash: rGQco3PaS52aQuQHrG30+iE77qyqrmgtZ3Q8mVv2a2U=)
2: ZyVtjjGLocNJH2LwSAGt8gqoYgE.roa (hash: cFakUTOmj1JV5hfxE5yE0hEvYoySNj+UV/6/MHSkYGc=)
3: bf76c_RBoxlQYKBIyUE41s22DZw.asa (hash: tzIsB3gmTmwMB3iO3YI/Je1p9PWZvorFEWv6UfwZj6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:7c:0e:7a:b0:62:d2:5b:ba:6f:1f:92:71:14:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac86b4e46e757d1ce7a8d807c3bcd2dfd80107a
Validity
Not Before: Oct 30 10:01:04 2026 GMT
Not After : Oct 31 10:01:04 2026 GMT
Subject: CN=ac5941482bdb959a8c62e02df8bcca570d9575da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:06:9f:bf:86:f6:46:09:c2:40:73:98:b3:
9b:12:dc:d2:cf:ee:db:33:26:07:b3:09:00:d8:47:
48:fd:9b:ba:39:c4:3e:ff:84:e1:99:fc:a1:30:2d:
f5:4a:1b:ed:16:1c:ab:05:09:4d:27:99:da:02:d0:
75:0e:3d:19:e1:6a:7c:88:af:24:48:14:26:a8:f8:
f2:da:da:83:0d:2c:8e:8b:a8:a7:80:79:fa:fe:ff:
e8:20:d7:bd:0d:a2:c1:58:5a:86:38:b8:ad:6e:08:
af:5c:44:f0:06:32:22:92:73:6e:af:df:19:06:66:
24:3c:a1:6d:ba:34:93:7b:86:bb:6d:a1:68:55:c2:
a0:34:85:df:73:5b:1b:6f:5f:eb:13:08:fc:08:34:
3b:d7:4a:46:dd:e3:83:3e:4a:93:25:40:69:f6:63:
27:ec:1d:5b:62:79:64:09:d8:08:3a:68:9e:09:b2:
ac:5a:15:55:1b:44:c4:8c:f3:3f:ab:50:96:da:33:
3d:43:78:ce:c6:f7:ce:f6:14:14:f1:ee:c4:b4:00:
1b:71:27:f1:8c:7c:2a:57:e7:31:19:e7:8c:65:bb:
a2:d1:89:25:fe:e9:7f:75:cf:cb:6b:cb:c7:76:d9:
e9:d6:50:52:88:fa:7a:26:5d:9a:7c:72:7b:c7:a9:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:41:48:2B:DB:95:9A:8C:62:E0:2D:F8:BC:CA:57:0D:95:75:DA
X509v3 Authority Key Identifier:
keyid:DA:C8:6B:4E:46:E7:57:D1:CE:7A:8D:80:7C:3B:CD:2D:FD:80:10:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2shrTkbnV9HOeo2AfDvNLf2AEHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8f817e-4bea-4617-8ba9-98ee67a3f693/1/2shrTkbnV9HOeo2AfDvNLf2AEHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:45:66:f1:46:33:0b:42:13:64:42:04:f2:99:2d:7e:28:ab:
74:c7:1e:7f:3a:e3:43:94:68:05:d9:50:6a:db:6d:6e:82:bb:
c5:2d:4d:95:54:0f:a1:10:ba:4b:b8:fb:aa:43:e7:6e:ef:38:
86:c2:b2:85:9a:a9:9d:fb:b7:04:bc:63:35:c4:aa:0e:63:ac:
37:4e:88:fc:22:3e:4b:ae:de:88:25:8a:cc:00:69:01:be:27:
aa:c9:6c:2f:96:4d:4e:51:5f:de:b1:8d:20:52:92:cc:06:4d:
27:13:fa:59:d2:ae:b1:b3:02:bc:eb:12:4f:ee:48:4f:55:a0:
ea:be:5c:af:d4:0d:ba:17:db:89:f7:ef:70:7b:18:f4:f7:2e:
3a:02:e1:25:96:da:15:48:32:74:60:e1:54:fe:90:88:b7:73:
10:7c:8a:73:e9:33:c3:f8:d1:0b:ae:c8:99:44:f8:15:09:59:
a6:e2:6f:b2:33:12:33:7a:51:99:55:a1:ab:10:8c:c2:04:55:
72:07:67:8e:7d:bb:78:54:18:db:28:e0:6d:26:3c:3b:f7:b6:
bf:12:42:ee:8d:23:e8:5b:69:7f:7a:f1:eb:95:b3:fa:b7:25:
d9:4e:46:17:0c:cf:a8:66:2a:61:37:60:ca:c6:e2:85:88:ed:
92:07:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:22:04 2026 by rpki-client